ReYoga Privacy Policy

This website collects certain Personal Data from its Users.

This notice describes the processing methods adopted by Re Yoga S.r.l. Società Benefit pursuant to Articles 13 and 14 of Regulation (EU) 2016/679.

Data Controller

Re Yoga S.r.l. Società Benefit
Via Matteo Ricci 16/A, 60126 Ancona (AN), Italy
Tax Code and VAT No.: 02674230426
Email: info@reyoga.it

Personal Data processed for the following purposes

For easier consultation, the main purposes are summarised below. Full details are provided in the following section.

  • Registration and account managementIdentification, contact, login, address and preference data.
  • Sale of products and order managementCart, checkout, payments, invoicing, shipping, returns, kits, gift cards and customisations.
  • Contacting the User and customer supportEmail, telephone, Jotform and other support channels.
  • Newsletters and promotional communicationsMailchimp, subscriptions, deliveries and measurement of interaction with messages.
  • Reviews, rewards, affiliation and back-in-stock alertsServices directly requested by the User.
  • AnalyticsGoogle Analytics 4 and internal technical statistics.
  • Advertising and remarketingGoogle Ads, Meta Pixel, Meta Events Manager and Meta Conversion API.
  • Security, fraud prevention and protection of rightsTechnical logs, checks and protection against unlawful use.

Details of Personal Data processing

Registration and account management

The website allows Users to create and manage an account, access their personal area and view orders, addresses, preferences and associated services.

Data processed: First name, surname, email address, telephone number, login credentials, addresses, language, tax data and account information.
Legal basis:Performance of pre-contractual measures and of the contract requested by the User.
Retention: For the duration of the account and subsequently for legal obligations, disputes or protection of rights.
Online sales and order management

Data are used to manage the cart, checkout, product availability, prices, taxes, discounts, kits, gift cards, customisations, orders, invoices, returns and refunds.

Data processed: Identification, tax and delivery data, order contents, purchased products, customisation requests and transaction data.
Legal basis:Performance of the contract and compliance with legal obligations.
Retention: 10 years from the last record for administrative, accounting and tax data and documentation.
Payment management

Payments are processed through the providers selected by the User. ReYoga normally receives transaction identifiers, payment status and information required for accounting reconciliation, without storing full card details.

Providers: PayPal and PayPlug.
Legal basis:Performance of the contract and legitimate interest in transaction security.
Retention: For the time required to manage the transaction and comply with accounting and tax obligations.
Shipping and pickup points

The required data are disclosed to carriers to organise delivery, pickup, tracking, transport documents and management of delivery issues.

Providers: BRT, UPS, GLS and DHL.
Legal basis:Performance of the contract.
Retention: For the time required for delivery and obligations related to the order.
Contacting the User and customer support

Requests may be received by email, telephone, Jotform forms or other channels. Jotform is used, for example, for returns, teacher price-list requests and contact requests.

Data processed: Contact data and any information voluntarily entered in the request.
Legal basis:Pre-contractual measures, performance of the contract or legitimate interest in providing support.
Retention: 24 months from closure of the request, unless disputes or further obligations apply.
Newsletters and promotional communications

Mailchimp is used through a server-side API integration to manage lists and send newsletters. Messages may contain tools that measure opens and clicks.

Data processed: First name, surname, email address, subscription status and interaction data relating to communications.
Legal basis:Consent, except where communications concerning similar products or services are permitted by law.
Retention: Until consent is withdrawn or the User objects, while retaining evidence of the choice.
Product customisation

The website allows Users to submit names, wording, logos or images to produce customised products. The User warrants that they are entitled to use the uploaded content.

Legal basis:Performance of the contract.
Retention: 12 months from delivery, unless disputes, warranties or further obligations apply.
Reviews, rewards programmes, affiliation and back-in-stock alerts

Data are used to publish reviews, calculate points, award rewards, issue vouchers, manage affiliation programmes and send alerts when a product becomes available again.

Legal basis:Consent, performance of the requested service, performance of the programme rules or legitimate interest in preventing abuse.
Retention: For the duration of the service or programme and subsequently for applicable obligations.
Analytics

Google Analytics 4 and internal technical statistics are used to measure traffic, sessions and ecommerce events and to improve the website.

Legal basis:Consent for tracking tools that are not strictly necessary.
Retention: According to the settings of the relevant tools and as described in the Cookie Policy.
Advertising, conversion measurement and remarketing

Google Ads, Meta Pixel, Meta Events Manager and Meta Conversion API are used to measure campaigns and conversions, create audiences and carry out remarketing activities.

Legal basis:Consent.
Retention: According to provider settings and retention periods.
Security, fraud prevention and protection of rights

The Controller uses logs and technical data to protect the website, accounts, payments and infrastructure, detect abuse and defend its rights.

Legal basis:Legitimate interest and compliance with legal obligations.
Retention: Up to 6 months for technical and security logs, unless incidents or legal defence needs require longer retention.

External services and recipients

Infrastructure, platforms and backups
Serverplan

Website hosting, security, technical infrastructure and backups.

PrestaShop and WordPress

PrestaShop manages the ecommerce platform. WordPress is used on certain subdomains. The plugins actually installed remain subject to the purposes described in this notice.

Google Drive

Storage, sharing, backup and retention of documents and Personal Data.

Payments, administration and logistics
PayPal and PayPlug

Payment processing and related security checks.

Fattura24

Administrative management, tax documents, invoicing and data linked to orders.

BRT, UPS, GLS and DHL

Shipping, delivery, pickup points and tracking services.

Communications and data collection
Mailchimp

List management and newsletter delivery through a server-side API integration.

Jotform

Return forms, contact forms, teacher price-list requests and similar data collection forms.

Content, analytics and marketing
Google

Google Tag Manager, Google Analytics 4, Google Ads, Google Maps, YouTube and Google Fonts, depending on the function and the consent provided.

Meta

Meta Pixel, Meta Events Manager and Meta Conversion API for campaign and conversion measurement, subject to consent.

Vimeo

Playback of videos embedded in website pages.

International data transfers

Certain providers may process data outside the European Economic Area. In such cases, transfers are based on adequacy decisions, the applicable Data Privacy Framework, Standard Contractual Clauses or other safeguards recognised by law.

User rights

Users may request access, rectification, erasure, restriction, portability and objection, and may withdraw consent at any time. They may also lodge a complaint with the competent data protection authority.

Requests may be sent to info@reyoga.it.

Cookies and Tracking Tools

For detailed information, please read the Cookie Policy.

Last updated: 24 July 2026.

Back to top